The opensource apps like Newpipe, SmartTube, termux and many others are the “malware”, not the ones with binary blobs on PlayStore that fork VLC, Newpipe and many opensource apps illegally, creating fake clones with ads and (real) malware.